CVE-2025-63467: High severity TOTOLINK LR350 vulnerability

Published Oct 31, 2025

Updated

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub425400 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK LR350

All of the following

TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309

TOTOLINK LR350

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63467?

CVE-2025-63467 is classified as a high severity vulnerability due to its potential to cause a Denial of Service (DoS).

How do I fix CVE-2025-63467?

To mitigate CVE-2025-63467, update the Totolink LR350 to the latest firmware version provided by the manufacturer.

What type of vulnerability is CVE-2025-63467?

CVE-2025-63467 is a stack overflow vulnerability that can be exploited through the ssid parameter.

What impact does CVE-2025-63467 have on the Totolink LR350?

CVE-2025-63467 can lead to a Denial of Service, disrupting the normal operation of the Totolink LR350.

Who is affected by CVE-2025-63467?

Users of Totolink LR350 routers running firmware version 9.3.5u.6369_B20220309 are affected by CVE-2025-63467.